Re: Restriction Software
- From: "Jmnts" <jmnts@xxxxxxxxxxx>
- Date: Mon, 3 Apr 2006 14:53:32 +0100
When I try to run from c:\Windows\system32\dssite.msc I receive the message:
c:\Windows\System32\dssite.msc
Windows cannot open this program because it has been prvented by a software
restriction policy. For more information, open Event Viewer or contact your
system administrator.
Of course this is an expected message
If I try to run from start menu -> Administrative tools - > Active directory
Sites and Services, the console opens with no problems???
If t this was an permission issue I wouldn't be able to run in any way..
Right?
In the GPMC the options for delegating permissions are the same as you would
in delegation wizard.
In the GPMC you only have as default: Link GPOs, Perform Group Policy
Modeling analyses and read group policy Results data.
If we want to achive something else we have to go to the advance tab, and
manually give permissions. The problem is that i can find the righ
permissions for my expecific needs, which are:
(Users of this group must be able to Create, Change, Edit, Delete and Link
Policy Objects, no matter who created the policies they must be able to
change each one policies)
Any ideas...!!!
Best Regards
"Florian Frommherz" <florian@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:uSklnAyVGHA.2480@xxxxxxxxxxxxxxxxxxxxxxx
Howdy!
Jmnts wrote:
Regarding to the version of the adminpak.msi, is the same i check it
myself.
You see the problem is that if I try to run the dssite.msc directly from
System32 the software is blocked as expected, the software isn't being
blocked if i try to run it from start menu -> Administrative tools - >
Active directory Sites and Services.
Is it really blocked or are you just logged in as a user and get an
"Access denied" message? I assume that you're using Windows XP / Windows
Server 2003 since Windows 2000 isn't capable of processing the Software
Restriction Policies, so ...
Another strange thing is that i manually created a shortcut to the
desktop from the dssite.msc and that shortcut also worked ??? Strange??
The software is only blocked if i try to run it directly from the
System32 folder.
You're sure you created a Hash rule and not a Path rule, right? This all
reads a little different. If so, did you logoff and logon again? Windows
XP handles Software Restriction Policies via explorer.exe - and a already
opened and running explorer.exe will *not* automatically block sofware
unless you log off and log in again.
Regarding to the Delegation of Permissions to the Group Policy Creator
Owners: i run the delegation wizard on the OU, but only a few options to
manage GPOs are available: Manage Group GPO Link, RSoP (Planning and
Logging).
Hum, sorry, I'm not using the "old-schooled" ;-) gpedit.msc - Policy
editor since GPMC is a little more comfortable. So, I can't say much about
that.
cheers,
Florian
--
Nachwuschsadmin aus dem Süddeutschen/Germany.
eMail: Vorname [bei] frickelsoft [Punkt] net.
.
- References:
- Restriction Software
- From: Jmnts
- Re: Restriction Software
- From: Florian Frommherz
- Re: Restriction Software
- From: Jmnts
- Re: Restriction Software
- From: Florian Frommherz
- Restriction Software
- Prev by Date: Same Regional Settings for all users
- Next by Date: Desktop redirection broken, can't revert
- Previous by thread: Re: Restriction Software
- Next by thread: Re: Implement DCGPO to only a select few DCs in my domain?
- Index(es):
Relevant Pages
|
